UnratedFix available
GitLab 16.1 released
Type: patchSources: GitLab releases
GitLab 16.1 includes a security-related change to fail closed for invalid Security Policy approval checks, blocking merge requests until invalid rules are addressed. It also adds an API endpoint for configuring CI/CD job token scope.
- Products
- GitLab
- Affected versions
- Not specified
- Fixed versions
- GitLab 16.1
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 00:56 UTC · Revision 1
Source evidence
GitLab 16.1 includes a security-related change to fail closed for invalid Security Policy approval checks, blocking merge requests until invalid rules are addressed. It also adds an API endpoint for configuring CI/CD job token scope.
With this update, invalid rules will “fail closed”, blocking MRs until invalid rules in any scan result policies are addressed.
GitLab
Fixed versions: GitLab 16.1
Complete source record
{
"id": "37250ee12b7f3fd505823af4714e561de3369db994df81e38dc69cba94e8808c",
"url": "https://docs.gitlab.com/releases/16/gitlab-16-1-released/",
"method": "llm",
"payload": {
"kind": "patch",
"title": "GitLab 16.1 released",
"summary": "GitLab 16.1 includes a security-related change to fail closed for invalid Security Policy approval checks, blocking merge requests until invalid rules are addressed. It also adds an API endpoint for configuring CI/CD job token scope.",
"evidence": "With this update, invalid rules will “fail closed”, blocking MRs until invalid rules in any scan result policies are addressed.",
"products": [
{
"name": {
"value": "GitLab",
"evidence": "GitLab 16.1 was released"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "GitLab 16.1",
"evidence": "GitLab 16.1 was released"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "official-gitlab-releases",
"document_id": 23728,
"published_at": "2023-06-22T00:00:00+00:00"
}